SEC-3P-001
security INFO Third-party scripts
Description
Scripts from third-party domains are loaded; they are risky without SRI (the finding is then raised to WARNING).
Recommendation
Add the `integrity` attribute (SRI) and limit third-party domains to what is necessary.
- Introduced in ruleset : 2026.09.0
- Detector :
third_party_scripts
Risks detected according to the technical rules currently configured. Publication remains subject to Apple's and Google's review, and their rules evolve.